[Snort-sigs] Signature Naming Convention

Chris Green cmg at ...435...
Tue Apr 16 09:05:03 EDT 2002


Robert Wagner <rwagner at ...447...> writes:

> "INFO MSN chat access" in the logs would prompt me to look at the info.rules
> if we want to change or disable the rule.  This rule is located in the
> policy.rules. Should it read: "POLICY MSN chat access"?  All of the
> policy.rules say INFO....

I concur. Too bad the obvious doesn't hit you until we're at a metric
scad of signatures.
-- 
Chris Green <cmg at ...435...>
"I'm beginning to think that my router may be confused."





More information about the Snort-sigs mailing list